Beveiligingsadvies

CVE-2019-12250

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-05-21 15:22:43

Laatst bijgewerkt 2024-08-04 23:17:39

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, which can be triggered by viewing a log. NOTE: the software maintainer disputes that this is a vulnerability because the request logger is not part of IdentityServer but only our development test host

← Alle CVE's bekijken Bekijk op cve.org ↗